Most effort focused on the existing SAML attribute support rather than the GSS extractor. 

Copy the dictionary.ukerna file from mech_eap to /usr/share/freeradius, and edit /usr/share/freeradius/dictionary to include that dictionary file.

Testing sample assertion added to /etc/freeradius/sites-available/default

	update reply {
		SAML-AAA-Assertion = '<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" IssueInstant="2011-03-19T08:30:00Z" ID="foo" Version="2.0">'
		SAML-AAA-Assertion += '<saml:Issuer>urn:mace:incommon:osu.edu</saml:Issuer>'
		SAML-AAA-Assertion += '<saml:AttributeStatement>'
		SAML-AAA-Assertion += '<saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"><saml:AttributeValue>cantor.2@osu.edu</saml:AttributeValue></saml:Attribute>'
		SAML-AAA-Assertion += '</saml:AttributeStatement>'
		SAML-AAA-Assertion += '</saml:Assertion>'
	}

Confirmed SAML attributes are available from GSS naming extensions as of 482459a9